Privacy

Bluepeek Reviews supplies NFC cards and the review pages they open. Two different groups of people appear here, and they are treated differently.

Customers are people who tap a card in a shop. Operators are the business owners and resellers who sign in to Bluepeek.

Tapping a card, or opening the page it points at, records:

• which card was tapped, which business it belongs to, and when
• a random session identifier held in your browser, so one visit is not counted as several
• a one-way hash of your IP address, salted with a secret. The address itself is never written down and the hash cannot be turned back into it. It exists to stop the same person submitting a hundred reviews.

If you leave feedback, it also records your rating, whatever you typed, and a name and contact detail only if you chose to give them. Those two fields are optional and the form works without them.

No advertising trackers, no analytics pixels, no third-party scripts run on a review page.

We count actions such as opening an introduction, trying a preview and successfully writing an NFC tag. These daily totals do not contain your name, business name, account ID, tag contents or a persistent device identifier. They are event counts, not records of individual journeys.

To limit automated requests, the server uses a salted IP hash that changes daily, stored separately from usage totals. Old rate-limit entries are removed during subsequent event processing after a day.

Suggestions are linked to your signed-in account for moderation. Approved titles and descriptions, their status and vote totals are public. Your account details and individual votes are not published. Please do not include private information in a suggestion.

Choosing to write a Google review sends you to Google, where Google’s own privacy policy applies. Bluepeek records only that the button was pressed. It never sees your review, your Google account, or whether you posted anything.

The Google review link is offered whatever rating you give. Bluepeek does not hide it from people who rated badly.

An email address, an optional name, the businesses on the account, and billing state. Card payments go directly to Stripe — Bluepeek never receives or stores card numbers.

Publishing a digital card makes the name, photo, contact details and links you choose publicly accessible. Saving a draft does not publish it. Physical card quote requests retain your design and contact email so we can fulfil your request.

For review campaigns we store the recipient address or phone number, the consent record supplied by the business, invoice or job reference, schedule and sending status. Requests include an unsubscribe link. Suppression records prevent further requests from that business through the same channel.

Review links identify a channel such as an invoice or receipt. They do not prove a physical NFC tap or a completed Google review. A request marked sent means the sending provider accepted it, not that the recipient received or read it.

• Supabase — the database and sign-in
• Vercel — hosting, in Sydney
• Stripe — subscription payments
• Resend — notification email and review requests
• SMSGlobal — SMS review requests when SMS sending is enabled

Feedback is shown to the business it was left for. It is not sold, and it is not shared with anyone else.

An operator can delete their own account from inside Bluepeek at any time: open the account menu, then Settings, and use Delete account. It removes your sign-in and your access, and cancels any subscription.

Your digital profile is deleted. Shared business records and card assignments remain, but paid review pages pause unless another active owner, reseller or approved grant covers their access. Pending review requests initiated by your account are cancelled.

Feedback customers left stays with the business it was left for, without your name attached to any note you wrote.

If you left feedback and want it removed, email info@bluepeek.com.au with the business and roughly when you left it. Feedback is not tied to an identity, so those details are what makes it findable.

If what is collected changes, this page changes with it and the date at the top moves.